HP warns of malware in HP ProCurve switches flash cards

Stephanie Wright, Contributor

HP announced that some HP ProCurve 5400 zl switches has been shipped that contain malware-infected compact flash cards in a safety bulletin released Apr. 10.

Switches are utilized by enterprises to glue network segments or network devices. The alert warns that if an infected compact flash card is reused in a working laptop or computer, that machine can become infected. HP gave no information regarding the malware involved, but a catalogue of the affected versions of the HP ProCurve switches (purchased after Apr. 30, 2011) is supplied in the security bulletin.

HP is urging customers to deal with this issue once possible, and is offering two solutions. The primary, the Software Purge Option, is suggested for patrons who would like to avoid network downtime, and involves running a script to delete the malicious file and directory.

According to the HP Software Security Response Team, “HP provides a script this is run by the switch manager using the ‘show tech custom' command. This script will delete the file(s) and directory without exposing a private computer to the files at the compact flash. The operation of the switch is just not impacted.”

The second option is the Hardware Replacement Option is for patrons who've 5400 zl switch inventory that should be purged to permit the Management Module to get replaced or anyone who feels “uncomfortable” with the primary option.

In this example, “An advanced replacement Management Module can be sent to the buyer. Once it arrives, the unique Management Module is returned to HP after the hot one is installed. The downside to this feature is that the 5400 zl switch ought to be powered down so we can replace the Management Module, leading to downtime,” said the Software Security Response Team.

Network switches just like the HP ProCurve versions are used to manage traffic in LANs (local area networks). The hardware is more sophisticated than a hub, because a switch has the power to process and pass data only to the intended receiver, where a hub would pass it to all machines on the network.

The ProCurve 5400 zl switch series contains layers 2, 3 and four switches, which HP's website says “support integrated advanced capabilities in chassis (6-slot and 12-solt) form factor” and offer scalability.

Dig Deeper

• People that read this also read...